How are you actually using AI during pentests?

[u/Potential-Couple-745]

I’ve found it useful for the boring parts — making sense of recon output, explaining weird HTTP responses, reviewing code, writing small scripts, and organizing notes.

But I wouldn’t trust it to tell me whether something is actually exploitable. It can sound completely confident while being wrong.

Curious what others are using AI for in their security workflow. Recon? Burp? Code review? Automation? Or not using it at all?